OCI Security Professional study guide
OCI Security Professional · Work through your exam, one topic at a time.
The Oracle Cloud Infrastructure 2023 Security Professional credential, tracked under exam code 1Z0-1104-23, is Oracle's professional-level certification for practitioners who design, implement, and operate security controls across OCI tenancies. It suits cloud security engineers, cloud architects, and administrators who already work hands-on with compartments, policies, VCNs, and Vault, and who want independent validation of that depth rather than an entry-level badge. Expect the exam to probe four broad areas: identity and access management fundamentals, including dynamic groups and policy syntax; network security through security lists, network security groups, gateways, and the shared-responsibility boundary; data protection covering encryption at rest and in transit, Vault keys, and secrets; and security monitoring via Audit, Logging, and Cloud Guard. Preparation should be lab-first. The OCI Security Professional study guide has 4 sections and about 1,521 words.
01Security fundamentals and OCI Identity and Access Management
This domain tests how OCI isolates tenants, compartments, and principals, and how IAM policies turn those boundaries into least-privilege access. Expect questions on policy syntax, dynamic groups, federation, MFA, and the difference between authentication and authorization.
366 words, about 2 min02Network security (VCN, security lists, NSGs, gateways)
This domain tests VCN design as a security boundary: subnet placement, route tables, gateways, security lists, and network security groups (NSGs). Questions often ask which control actually blocks or permits a flow.
372 words, about 2 min03Data protection, encryption, and key management
This domain tests how OCI protects data at rest and in transit, and how Vault keys and secrets are governed. Expect questions on envelope encryption, key versions, rotation, service integration, and the consequences of disabling or deleting key material.
400 words, about 2 min04Security monitoring, logging, and compliance
This domain tests whether you can detect, investigate, and retain security-relevant activity across OCI. It covers Audit, Logging, Service Connector Hub, Events, Notifications, Cloud Guard, Security Zones, Vulnerability Scanning, and compliance posture.
383 words, about 2 min